EFFECTIVE 22 JULY 2026
UpCost has no account, no server and no analytics. Nothing you do in the app is transmitted anywhere, because there is nowhere for it to go.
Nothing. No name, no email, no device identifier, no advertising ID. There is no sign-up because there is no account.
The app stores a small amount of data locally, in its own container on your device:
This never leaves the device. Deleting UpCost deletes all of it.
UpCost uses Apple's Screen Time framework (Family Controls). When you pick apps to lock, Apple does not tell UpCost which apps you picked. The app receives an opaque token it cannot read, decode or transmit. This is Apple's design, and it means your app choices are private even from us.
Push-ups are counted by watching your face with the front camera while — and only while — you are paying for an unlock. Frames are analysed on the device to measure how close your face is, then discarded immediately.
Nothing is recorded. No photo or video is saved, and no image ever leaves your phone. UpCost keeps a single number from each frame — how much of the picture your face fills — and forgets even that when the set ends. The camera stops the moment you finish or cancel.
Squats use the phone's motion sensors and steps use its motion coprocessor, again only while you are paying for an unlock. These readings count repetitions in the moment and are never stored beyond the running total, and never transmitted. UpCost does not read Apple Health.
If you subscribe, the purchase is handled entirely by Apple through the App Store. UpCost never sees your card, your billing address or your Apple ID. The app only ever learns whether a valid subscription exists.
There are none. No analytics SDK, no crash reporter, no advertising network, no tracking of any kind. UpCost makes no network requests except those Apple's own App Store framework makes to verify a purchase.
UpCost is a self-control tool intended for the person holding the phone. It is not designed for children and collects no data from anyone, of any age.
Because UpCost holds no data about you on any server, there is nothing for us to export, correct or delete. Everything is on your device and under your control. Deleting the app removes it all, and iOS automatically lifts every block when it does.
If this policy ever changes, the effective date above changes with it. Material changes will be noted in the app's release notes.
Questions? Email joshfred@icloud.com and a real person will answer.